bagi99 Privacy Policy

1 Data Controller

bagi99 acts as the data controller in respect of the personal information collected from Players on the Platform. As data controller, bagi99 determines the purposes for which and the means by which personal data is processed. If you have any questions or concerns about how your personal data is handled, please contact our Data Protection team at [email protected]. We will endeavour to respond to all privacy-related enquiries within five (5) business days.

2 Information We Collect

bagi99 collects personal data from Players through several channels, including registration forms, account usage, payment transactions, customer support interactions, and automated technical systems. The categories of personal data we collect include:

• Identity Data: Full name, date of birth, gender, and a copy of government-issued photo identification (e.g., National ID Card, Passport) collected during Know Your Customer (KYC) verification.
• Contact Data: Email address, mobile phone number, and residential address (including district, division, and postal code within Bangladesh).
• Financial Data: Mobile banking account numbers (bKash, Nagad, Rocket, Upay), card details (Visa, Mastercard — stored in tokenised form only), transaction history, deposit and withdrawal records, and account balance information.
• Account Data: Username, encrypted password, account preferences, bonus history, self-imposed limits, and responsible gaming settings.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, time zone, session duration, and page interaction logs.
• Usage Data: Games played, bet amounts, win/loss records, session frequency, navigation paths through the Platform, and feature usage patterns.
• Communications Data: Records of customer support conversations, feedback submissions, and any correspondence you send to bagi99 via chat or email.
• Location Data: Approximate geolocation derived from your IP address, used to detect access from Prohibited Territories and comply with responsible gaming obligations.

We do not knowingly collect personal data from individuals under the age of 21. If we discover that a minor has provided us with personal information, we will delete that data immediately and close the associated account.

3 How We Use Your Data

bagi99 processes personal data only for legitimate, clearly defined purposes. The following table summarises the primary purposes for which we use your data and the legal basis for doing so:

bagi99 does not use your personal data for automated decision-making that produces significant legal effects without human oversight, except where required for real-time fraud detection, in which case you may request a manual review of any decision affecting your account.

4 Cookies & Tracking Technologies

bagi99 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse usage patterns. Cookies are small text files stored on your device when you visit bagi99.onl. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit. They cannot be disabled without preventing you from using the Platform.
• Functional Cookies: Remember your preferences such as language settings, currency display, and last-visited game category to improve your experience on return visits.
• Analytics Cookies: Help us understand how Players interact with the Platform — which pages are visited most often, where users drop off, and how the site performs overall. This data is aggregated and anonymised.
• Security Cookies: Used for fraud detection and prevention, including identifying unusual login patterns or suspicious account activity.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair core Platform functionality including account login and bet placement. bagi99 does not use third-party advertising or behavioural targeting cookies.

5 Data Sharing & Third Parties

bagi99 does not sell, rent, or trade your personal data. We share personal data only with trusted third parties where it is necessary to deliver our services, comply with legal obligations, or protect the integrity of the Platform. Categories of recipients include:

• Payment Processors: bKash, Nagad, Rocket, Upay, Visa, and Mastercard receive the minimum data necessary to process your financial transactions securely.
• Identity Verification Providers: Third-party KYC services that help us verify the identity and age of Players as required by our responsible gaming commitments.
• Game Providers: Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi, and other certified studios receive session tokens and anonymised gameplay data to deliver their games on our Platform.
• Customer Support Platforms: Providers of our live chat and helpdesk infrastructure, bound by strict data processing agreements, may process your name and support query history.
• Fraud & Security Services: Specialist providers that analyse transaction patterns and device fingerprints to detect and prevent fraudulent activity.
• Legal Authorities: We may disclose personal data to law enforcement, regulatory bodies, or courts when required by applicable law or when necessary to protect the rights, safety, or property of bagi99 or its Players.

All third-party service providers engaged by bagi99 are required to process personal data only in accordance with our instructions and applicable data protection standards. We do not permit them to use your data for their own independent purposes.

6 Data Retention

bagi99 retains personal data only for as long as necessary to fulfil the purposes outlined in this Policy. Specific retention periods are determined by the nature of the data and the requirements of applicable law. As a general guideline:

• Account data and transaction records are retained for a minimum of five (5) years from the date of account closure or last transaction, to comply with financial record-keeping obligations.
• KYC documents (identity verification materials) are retained for five (5) years from the end of the business relationship, after which they are securely destroyed.
• Customer support communication logs are retained for two (2) years from the date of the interaction.
• Technical and usage data (logs, analytics) is retained for up to twelve (12) months in identifiable form, after which it is anonymised or deleted.
• Marketing consent records are retained until consent is withdrawn and for a reasonable period thereafter to document compliance.

When personal data is no longer required, bagi99 will securely delete or anonymise it in a manner that prevents reconstruction of the original information.

7 Data Security

bagi99 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure. Our security measures include:

• Industry-standard 256-bit SSL/TLS encryption for all data transmitted between your device and bagi99.onl.
• Encryption of sensitive data at rest, including financial records and identity documents, using AES-256 encryption.
• Access controls ensuring that only authorised bagi99 personnel with a legitimate business need can access personal data, governed by role-based permission systems.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Secure, isolated data storage environments with logging and monitoring for anomalous access patterns.
• Staff training on data protection responsibilities and secure data handling procedures.

8 Your Rights as a Data Subject

As a Player using the bagi99 Platform, you have a number of rights in relation to the personal data we hold about you. These rights are subject to applicable legal limitations and verification of your identity. Your rights include:

• Right of Access: You may request a copy of the personal data bagi99 holds about you, free of charge, by contacting [email protected].
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. You may update some information directly via your account settings panel.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal obligation to retain certain records.
• Right to Restriction: You may request that we restrict processing of your data in certain circumstances — for example, while a dispute about its accuracy is being resolved.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your personal data in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal data where it is based on legitimate interests, including direct marketing. We will stop processing unless we can demonstrate compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on consent (e.g., receiving promotional emails), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Request". We will respond within 30 days of receiving a valid, verified request. In complex cases this period may be extended by a further 30 days, of which we will notify you.

9 Marketing Communications

bagi99 may send you promotional communications about new games, seasonal bonuses (for example around Eid or Pohela Boishakh), special tournaments, and other platform updates. We will only send marketing communications where you have given explicit consent at the time of registration or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your account settings or by following the unsubscribe link in any marketing email. Withdrawal of marketing consent does not affect the delivery of essential transactional communications related to your account (such as deposit confirmations, withdrawal notices, and security alerts), which are sent as a necessary part of the service.

10 Children's Privacy

The bagi99 Platform is strictly for adults aged 21 and above. We do not knowingly collect, solicit, or retain personal data from individuals under the age of 21. If a parent or guardian believes that their child has created an account or provided personal information on bagi99.onl, they should contact us immediately at [email protected]. Upon verification, we will promptly close the account and delete all associated personal data without undue delay.

bagi99 employs age verification procedures during registration and reserves the right to request documentary proof of age at any stage of the customer lifecycle. Any account found to belong to a minor will be closed and any funds held in that account will be handled in accordance with applicable legal requirements.

11 International Data Transfers

bagi99 primarily processes and stores personal data within secure server infrastructure serving the Bangladesh region. In certain circumstances, personal data may be processed by our third-party service providers (such as international game studios or identity verification services) whose operations are located outside Bangladesh. Where such transfers occur, bagi99 takes steps to ensure that your data receives a level of protection equivalent to that described in this Policy, including by entering into appropriate data processing agreements with those providers.

12 Changes to This Policy

bagi99 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform operations. Where changes are material, we will notify registered Players via the email address associated with their account or through a prominent notice on the Platform before the changes take effect. The "Last updated" date at the top of this page will be revised accordingly.

Your continued use of the bagi99 Platform following notification of any changes constitutes your acceptance of the revised Policy. If you do not agree with a material change, you should discontinue use of the Platform and contact support to request account closure.